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DETAILED ACTION 

1 . Pre-Appeal brief request for review, under CFR 41 .37, has been filed. Claims 1-26 have 
been examined. Examiners amendment has been made for all independent claims 1, 8, 14, 20, 
and 26, and dependent claims 11, 18, and 23 have been canceled based on the telephone 
interview, with Steve McDonald on March 10, 2006. 

EXAMINER'S AMENDMENT 

2. An examiner's amendment to the record appears below. Should the changes and/or 
additions be unacceptable to applicant, an amendment may be filed as provided by 37 CFR 

. 1.312. To ensure consideration of such an amendment, it MUST be submitted no later than the 
payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview with 
Steve McDonald on March 10, 2006. 

Examiner initiated interview has been made with Steve McDonald to incorporate 
allowable features, "VOICE firewall providing authentication and the authentication being a 
challenge response authentication", into the claims, as applicant disclosure describes on 
paragraph 0046, and Steve McDonald agreed to the changes. 



3. Examiner amends claims 1,8, 14, 20, and 26, and cancels claims 11,18, and 23. 
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1 . (Currently Amended) A method of providing communication between a provider 
endpoint at a provider location and a user endpoint at a user location behind a data firewall, the 
method comprising the steps of; 

receiving, by a voice firewall a connection signal from a soft switch at the provider 

» 

location, wherein a data portion of the connection signal includes a private connection address 
associated with the provider endpoint, wherein the voice firewall provides authentication for the 
user endpoint and said soft switch provides a challenge-response mechanism and maintains a 
command session with the user endpoint when the user endpoint is authenticated by the voice 
firewall and wherein the user endpoint comprises a voice over Internet Protocol device ; 

modifying the data portion of the connection signal by substituting a public connection 
address of the voice firewall for the private connection address; and 

sending the modified connection signal to the user endpoint. 

8. (Currently Amended) A method of providing connection between a provider endpoint at 
a provider location and a user endpoint at a user location behind a data firewall the method 
comprising the steps of: 

receiving , by a voice firewall a connection signal from a soft switch at the provider 
location, wherein a data portion of the connection signal includes a private connection address 
associated with the provider endpoint, wherein the soft switch provides a challenge-response 
authentication and maintains a command session with the user endpoint when the user endpoint 
is authenticated ; 

storing , by the voice firewall the private connection address; 



Application/Control Number: 10/086,604 Page 4 

Art Unit: 2136 

modifying , by the voice firewall the connection signal by substituting a public 
connection address for the private connection address; 

opening a voice communication port of the voice firewall to provide communications 
between the user endpoint and the provider endpoint; and sending the modified connection signal 
to the user endpoint. 

11. (Canceled). 

14. (Currently Amended) A voice firewall comprising: 
a command input port; 
a command output port; 

a processor electrically connected to the command input port and the command output 
port, wherein the processor is configured to receive a connection signal through the command 
input port, wherein the processor is further configured to substitute a public connection address 
of the voice firewall for a private connection address of a provider endpoint embedded within a 
data portion of the connection signal thereby hiding the private connection address, wherein the 
voice firewall is adapted to authenticate a user endpoint located behind a data firewall and that is 
provided a challenge-response with a soft switch, and wherein the user endpoint is addressed in 
the connection signal ; and 

a voice communication port electrically connected to the processor, wherein the voice 
communication port is associated with the private connection address on a private side of the 
voice firewall and is associated with the public connection address on a public side of the voice 
firewall. 
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18. (Canceled). 

20. (Currently Amended) A computer program stored on a computer-readable medium 
comprising: 

instructions for receiving, by a voice firewall a connection signal from a provider 
endpoint at a provider location; 

instructions for substituting a public connection address for a private connection address 
embedded within a data portion of the connection signal, wherein the voice firewall provides 
authentication for the a user endpoint that is provided a challenge-response by a soft switch and 
said soft switch maintains a command session with the user endpoint when the user endpoint is 
authenticated by the voice firewall ; and 

instructions for sending the modified connection signal to [[a]] user endpoint at a user 
location behind a data firewall, wherein the user endpoint comprises a voice over Internet 
Protocol device . 

26. (Currently Amended) A method of providing voice communication between two 
endpoints including an endpoint located behind a data firewall over a digital network, the method 
comprising the steps of: 

providing, by a soft switch, a challenge-response to the endpoint; 

receiving , by a voice firewall a Connect command that includes a private connection 



Application/Control Number: 10/086,604 Page 6 

Art Unit: 2136 

address of a provider endpoint embedded in a data portion of the Connect command , wherein the 
voice firewall is adapted to authenticate the end point ; 

modifying , by the voice firewall the Connect command to substitute a public connection 
address of the voice firewall for the private connection address thereby biding the private 
connection address ; and 

sending the modified Connect command to [[one of]] the endpoint . 

Allowable Subject Matter 

4. The following is an examiner's statement of reasons for allowance: 
Claims 1-10,12-17,1 9-22, and 24-26 are allowed. 

Claims 1, 8, 20, and 26: Prior art of record neither alone nor in combination teach a 
method/medium of providing voice communication between two endpoints including an 
endpoint located behind a data firewall over a digital network, the method comprising receiving, 
by a voice firewall, a Connect command that includes a private connection address of a provider 
endpoint, embedded in a data portion of the Connect command, wherein the voice firewall is 
adapted to authenticate the end point and said authentication is a challenge-response 
authentication; modifying, by the voice firewall, the Connect command to substitute a public 
connection address of the voice firewall for the private connection address thereby biding the 
private connection address; and sending the modified Connect command to the endpoint. 

Claim 14: Prior art of record neither alone nor in combination teach a voice firewall comprising a 
command input port; a command output port; a processor electrically connected to the command 
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input port and the command output port, wherein the processor is configured to receive a 
connection signal through the command input port, wherein the processor is further configured to 
substitute a public connection address of the voice firewall for a private connection address of a 
provider endpoint embedded within a data portion of the connection signal thereby hiding the 
private connection address, wherein the voice firewall is adapted to authenticate a user endpoint 
located behind a data firewall and said authentication is a challenge-response authentication, and 
wherein the user endpoint is addressed in the connection signal; and a voice communication port 
electrically connected to the processor, wherein the voice communication port is associated with 
the private connection address on a private side of the voice firewall and is associated with the 
public connection address on a public side of the voice firewall. 

Claims 2-7, 9-10, 12-13, 15-17, 19, 21-22, and 24-25 are allowed because of dependency. 

Any comments considered necessary by applicant must be submitted no later than the 
payment of the issue fee and, to avoid processing delays, should preferably accompany the issue 
fee. Such submissions should be clearly labeled "Comments on Statement of Reasons for 
Allowance." 

Conclusion 

5. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. USPN 6,697,377 Bl Ju et al. a VOIP firewall network address translation. 
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6. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Eleni A. Shiferaw whose telephone number is 571-272-3867. 
The examiner can normally be reached on Mon-Fri 8:00am-5:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz R. Sheikh can be reached on 571-272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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